https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/226468#M43535 <P>The rules should work either in explicit proxy mode or transparent mode.<BR />However, the gateway does not perform well in explicit proxy mode as the outbound traffic from the gateway will be F2F/slowpath (can't be accelerated by SecureXL).</P> Thu, 12 Sep 2024 21:46:56 GMT PhoneBoy 2024-09-12T21:46:56Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/226393#M43529 <P>Hello.</P><P>I will use checkpoint as gateway to internet and as proxy server.</P><P>First i configured rule for proxy as rule 1 on picture<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ChProxy1.PNG" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/27582i30B9B309259AB0F0/image-size/large?v=v2&amp;px=999" role="button" title="ChProxy1.PNG" alt="ChProxy1.PNG" /></span></P><P>And it work.</P><P>After this I added rule 2 for transparet access.</P><P>After I disabled proxy on browser and enable rule 2 I get internet access.</P><P>My question is:</P><P>If I want to granulate access to internet with same rules for proxy and transparent, must I duplicate rules?</P><P>PS:</P><P>One deny rule can work for both method (proxy and transparent)</P> Thu, 12 Sep 2024 13:36:54 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/226393#M43529 OlegPowerC 2024-09-12T13:36:54Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/226468#M43535 <P>The rules should work either in explicit proxy mode or transparent mode.<BR />However, the gateway does not perform well in explicit proxy mode as the outbound traffic from the gateway will be F2F/slowpath (can't be accelerated by SecureXL).</P> Thu, 12 Sep 2024 21:46:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/226468#M43535 PhoneBoy 2024-09-12T21:46:56Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/226663#M43565 <P>Thank You</P> Sat, 14 Sep 2024 18:20:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/226663#M43565 OlegPowerC 2024-09-14T18:20:15Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257889#M50564 <P>For the traffic from Explicit Proxy to Internet? Is Need a rule? Also a NAT rule?</P> Mon, 22 Sep 2025 11:25:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257889#M50564 Supporto_Checkp 2025-09-22T11:25:20Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257944#M50580 <P>Traffic will be seen as originating from the gateway IP in Explicit Proxy, which will be permitted through Implied Rules.</P> Mon, 22 Sep 2025 19:56:49 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257944#M50580 PhoneBoy 2025-09-22T19:56:49Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257967#M50586 <P>Thanks, and how can i apply app control or url filtering rule?</P> Tue, 23 Sep 2025 08:22:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257967#M50586 Supporto_Checkp 2025-09-23T08:22:39Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257980#M50588 <P><A href="https://support.checkpoint.com/results/sk/sk110013" target="_blank">https://support.checkpoint.com/results/sk/sk110013</A></P> Tue, 23 Sep 2025 11:46:49 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257980#M50588 G_W_Albrecht 2025-09-23T11:46:49Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257998#M50589 <P>Same as without Explicit Proxy, i.e. the way you configure the rules is exactly the same.<BR /><BR /></P> Tue, 23 Sep 2025 13:53:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/257998#M50589 PhoneBoy 2025-09-23T13:53:56Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/258024#M50598 <P>so let me make an example:</P><P>Client 10.10.10.1</P><P>GW 10.10.10.254</P><P>Explicit proxy port=3128</P><P>Rule for explicit proxy:</P><P>10.10.10.1 ---&gt; 10.10.10.254 service 3128 accept</P><P>10.10.1.1 ---&gt;&nbsp; App control Service (for example Facebook) accept ??</P><P>&nbsp;</P> Tue, 23 Sep 2025 16:40:47 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/258024#M50598 Supporto_Checkp 2025-09-23T16:40:47Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/258033#M50599 <P>Correct</P> Tue, 23 Sep 2025 18:38:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Internet-access-rules-for-proxy-and-transparent/m-p/258033#M50599 PhoneBoy 2025-09-23T18:38:28Z